6.5
CVSSv2

CVE-2011-0757

Published: 02/02/2011 Updated: 19/09/2017
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which allows remote authenticated users to execute non-DDL statements by leveraging previous possession of this authority.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm db2 9.1

ibm db2

ibm db2 9.5

ibm db2 9.7